GO-2025-3956 — Vulnetix

Try Vulnetix Request Demo

GO-2025-3956 PUBLISHED

Unexpected paths returned from LookPath in os/exec

Affected Products

Vendor	Product	Versions
Go	stdlib	0, 1.24.0, 0

Timeline

Sep 18, 2025 CVE Published
Feb 4, 2026 CVE Updated

References

https://go.dev/cl/691775 patch
https://go.dev/issue/74466 report
https://groups.google.com/g/golang-announce/c/x5MKroML2yM url

Open in Interactive Console →